Privacy notice

Who we are

NexusVoid AI ("Nexus Void", "we") runs nexusvoidai.com and provides ARGUS (code security), AEGIS (GRC and compliance) and VAPT (penetration testing). This notice explains what personal data we handle on this website and in those products, and what you can do about it.

What we collect

When you contact us or book a call: your name, work email, company and message. Calls are booked through Cal.com.

When you request a VAPT quote: your work email and your scope answers (how many APIs, how many targets, whether testing is logged in and how many roles, and the integration type), plus the estimate we showed you.

When you subscribe to our research or news: your email address.

What the website records: pages visited, referrer, device and approximate location through Google Analytics, and whether a visit from a Google ad led to a quote request or a booked call (Google Ads conversion measurement).

What our products process for customers: for ARGUS, the repositories you connect and the findings; for AEGIS, asset inventories, policies, evidence and logs; for VAPT, target details, any test credentials you provide, findings and reports.

Why we collect it

To answer you, prepare a quote and arrange the call you asked for; to deliver the service you bought; to send research and news you subscribed to (you can unsubscribe at any time); to understand which pages and ads help visitors; and to keep our services secure and meet legal obligations. We do not sell personal data.

Who we share it with

Service providers that run parts of our business, each under a written agreement and given only what the task needs:

• Website hosting (Framer)
• Form and subscriber database (Supabase)
• Call scheduling (Cal.com)
• Analytics and ad measurement (Google)
• Cloud hosting, email and AI providers that power product features

The current list of sub-processors for our products is available on request. We disclose data to authorities only when the law requires it.

How long we keep it

Lead records, including quote requests, are kept for 24 months after the last contact. Newsletter addresses are kept until you unsubscribe. Customer data is kept for the life of the subscription and deleted once the 30-day export window after termination closes. Audit logs are kept for 180 days and backups roll off within 35 days.

Your rights

You can ask for a copy of your data, ask us to correct or delete it, withdraw consent, or object to a use, including under GDPR, US state privacy laws such as the CCPA, and India's DPDP Act. Write to lakshay@nexusvoidai.com and we will respond within 30 days. You can also complain to your data protection authority.

Cookies

This website uses Google Analytics cookies to measure visits and to record when a visit from a Google ad leads to a quote request or a booked call. We do not sell this data. You can block or delete cookies in your browser settings, or install Google's Analytics opt-out add-on. Our products use cookies to keep you signed in and remember your settings.

International transfers

AEGIS stores compliance data and files in India. Some of our providers, including Google and AI providers, process data in the US or EU. Where data crosses a border, we rely on contractual safeguards.

How we protect it

We limit access to the people who need it, encrypt data in transit and apply security controls across our systems. Nexus Void does not yet hold its own SOC 2 report or ISO 27001 certificate; we will walk your security team through our controls on request.

Children

Our website and services are for businesses and are not directed at anyone under 18.

Changes to this notice

We post the new version here and change the date at the top. If a change affects how we handle your data, account owners get an email before it takes effect.

How to contact us

Write to lakshay@nexusvoidai.com about anything in this notice, or to security@nexusvoidai.com for security questionnaires and vulnerability reports. A person reads both. See also our terms of service.